CVE-2024-12828: Webmin CGI Command Injection Remote Code Execution Vulnerability

Published Dec 30, 2024

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.

Affected Software

2 affected components

Webmin Webmin

Webmin Webmin=2.104

Remediation

Patch Available

https://github.com/webmin/authentic-theme/commit/61e5b10227b50407e3c6ac494ffbd4385d1b59df

Event History

Dec 30, 2024

CVE Published

via MITRE·04:48 PM

Data Sourced

via MITRE·04:48 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Feb 26, 2025

Advisory Published

via ZDI·08:02 AM

Frequently Asked Questions

What is the severity of CVE-2024-12828?

CVE-2024-12828 is assessed as a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2024-12828?

To mitigate CVE-2024-12828, update to the latest version of Webmin that has addressed this vulnerability.

Who is affected by CVE-2024-12828?

CVE-2024-12828 affects installations of Webmin that do not have the latest security patches applied.

What type of vulnerability is CVE-2024-12828?

CVE-2024-12828 is a remote code execution vulnerability that requires authentication to be exploited.

Can CVE-2024-12828 be exploited without authentication?

No, exploitation of CVE-2024-12828 requires an authenticated user.